<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00641826</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-25T02:15:44+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">DANAK: Finding the odd!</title>
            <author role="aut">
              <persName>
                <forename type="first">Cynthia</forename>
                <surname>Wagner</surname>
              </persName>
              <idno type="halauthorid">575565-0</idno>
              <affiliation ref="#struct-525111"/>
              <affiliation ref="#struct-366875"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jérôme</forename>
                <surname>François</surname>
              </persName>
              <email type="md5">f6cc842f88152792ecf7a4209022088d</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="string">jeromefrancois</idno>
              <idno type="idhal" notation="numeric">1309</idno>
              <idno type="halauthorid" notation="string">3415-1309</idno>
              <idno type="IDREF">https://www.idref.fr/139501916</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7457-458X</idno>
              <affiliation ref="#struct-525111"/>
              <affiliation ref="#struct-366875"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Radu</forename>
                <surname>State</surname>
              </persName>
              <idno type="idhal" notation="numeric">755670</idno>
              <idno type="halauthorid" notation="string">111433-755670</idno>
              <idno type="IDREF">https://www.idref.fr/059893591</idno>
              <affiliation ref="#struct-525111"/>
              <affiliation ref="#struct-366875"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Thomas</forename>
                <surname>Engel</surname>
              </persName>
              <idno type="halauthorid">429383-0</idno>
              <affiliation ref="#struct-366875"/>
              <affiliation ref="#struct-525111"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Jérôme</forename>
                <surname>François</surname>
              </persName>
              <email type="md5">ed02f37837bfa2b2cecb4644a236aafb</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2011-11-16 17:21:18</date>
              <date type="whenModified">2025-12-11 15:06:16</date>
              <date type="whenReleased">2011-11-17 10:38:21</date>
              <date type="whenProduced">2011-09-06</date>
              <date type="whenEndEmbargoed">2011-11-16</date>
              <ref type="file" target="https://inria.hal.science/hal-00641826v1/document">
                <date notBefore="2011-11-16"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-00641826v1/file/danak.pdf" id="file-641826-386441">
                <date notBefore="2011-11-16"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="113738">
                <persName>
                  <forename>Jérôme</forename>
                  <surname>François</surname>
                </persName>
                <email type="md5">ed02f37837bfa2b2cecb4644a236aafb</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00641826</idno>
            <idno type="halUri">https://inria.hal.science/hal-00641826</idno>
            <idno type="halBibtex">wagner:hal-00641826</idno>
            <idno type="halRefHtml">&lt;i&gt;5th International Conference on Network and System Security&lt;/i&gt;, Sep 2011, Milan, Italy. &lt;a target="_blank" href="https://dx.doi.org/10.1109/ICNSS.2011.6059996"&gt;&amp;#x27E8;10.1109/ICNSS.2011.6059996&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">5th International Conference on Network and System Security, Sep 2011, Milan, Italy. &amp;#x27E8;10.1109/ICNSS.2011.6059996&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-641826-386441"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt/>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">DANAK: Finding the odd!</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Cynthia</forename>
                    <surname>Wagner</surname>
                  </persName>
                  <idno type="halauthorid">575565-0</idno>
                  <affiliation ref="#struct-525111"/>
                  <affiliation ref="#struct-366875"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jérôme</forename>
                    <surname>François</surname>
                  </persName>
                  <email type="md5">f6cc842f88152792ecf7a4209022088d</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="string">jeromefrancois</idno>
                  <idno type="idhal" notation="numeric">1309</idno>
                  <idno type="halauthorid" notation="string">3415-1309</idno>
                  <idno type="IDREF">https://www.idref.fr/139501916</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7457-458X</idno>
                  <affiliation ref="#struct-525111"/>
                  <affiliation ref="#struct-366875"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Radu</forename>
                    <surname>State</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">755670</idno>
                  <idno type="halauthorid" notation="string">111433-755670</idno>
                  <idno type="IDREF">https://www.idref.fr/059893591</idno>
                  <affiliation ref="#struct-525111"/>
                  <affiliation ref="#struct-366875"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Thomas</forename>
                    <surname>Engel</surname>
                  </persName>
                  <idno type="halauthorid">429383-0</idno>
                  <affiliation ref="#struct-366875"/>
                  <affiliation ref="#struct-525111"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>5th International Conference on Network and System Security</title>
                  <date type="start">2011-09-06</date>
                  <date type="end">2011-09-08</date>
                  <settlement>Milan</settlement>
                  <country key="IT">Italy</country>
                </meeting>
                <imprint>
                  <publisher>IEEE</publisher>
                  <date type="datePub">2011-09-06</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/ICNSS.2011.6059996</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>With the growth of network connectivity and network sizes, the interest in traffic classification respectively attack and anomaly detection in network monitoring and security related activities have become very strong. In this paper, a new tool called DANAK has been developed for the detection of anomalies in Netflow records by referring to spatial and temporal information aggregation in combination with Machine Learning techniques. Spatially aggregated Netflow records are fed in a new designed kernel function in order to analyze Netflow records on context and quantitative information. To strengthen the analysis of large volumes of Netflow records, support vector machines are applied. The proposed method has been validated by extensive experimentation on real data sets, including numerous attack strategies of different roots.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-525111" status="VALID">
          <orgName>Interdisciplinary Centre for Security, Reliability and Trust</orgName>
          <orgName type="acronym">SnT</orgName>
          <desc>
            <address>
              <addrLine>6 Rue Richard Coudenhove-Kalergi, 1359 Luxembourg</addrLine>
              <country key="LU"/>
            </address>
            <ref type="url">https://wwwen.uni.lu/snt</ref>
          </desc>
          <listRelation>
            <relation active="#struct-366875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-366875" status="VALID">
          <idno type="IdRef">124635016</idno>
          <idno type="ISNI">0000000122959843</idno>
          <idno type="ROR">https://ror.org/036x5ad56</idno>
          <idno type="Wikidata">Q59668</idno>
          <orgName>Université du Luxembourg = University of Luxembourg = Universität Luxemburg</orgName>
          <orgName type="acronym">uni.lu</orgName>
          <date type="start">2003-01-01</date>
          <desc>
            <address>
              <addrLine>Université du Luxembourg [Siège] – 2, place de l’Université – L-4365 Esch-sur-Alzette – Luxembourg</addrLine>
              <country key="LU"/>
            </address>
            <ref type="url">http://wwwfr.uni.lu/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>